Search results

  1. proruskii

    Homebrew The bootroms

    Other persons with bootrom can verify sequence, especially protect area 0x8000 and up. My friend not want release. But it show bootrom be dumped.
  2. proruskii

    Homebrew The bootroms

    @blujay you show proof yet? I not believe you auto Is no problem show more for proof: 0x8000: 21 32 A0 E3 00 10 D3 E5 01 10 C1 E3 00 10 C3 E5 D3 00 A0 E3 00 F0 2F E1 4C D0 9F E5 D2 00 A0 E3
  3. proruskii

    Homebrew The bootroms

    My friend is decap doctor. He say many bootrom in 3ds. First bytes of a9 bootrom for proof: 0A 00 00 EA 24 00 00 EA 21 00 00 EA 24 00 00 EA 25 00 00 EA FE FF FF EA 1A 00 00 EA 1A 00 00 EA 46 80 00 00 DC 00 FF FF 00 00 00 08 30 5D FF FF
  4. proruskii

    Homebrew braindump prerelease - dump game contents on any system version!

    This was trick I talked about before for creating 9.6+ system for N3DS emunand ;)))
  5. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    Actually there is way around 9.6+ and you now said how :)
  6. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    I think I discover trick to decrypt 9.6+ Puzzle and dragons Z demo :)))) It all done in userland
  7. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    Dazzozo any hint on how you did this?
  8. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    You are right my friend. How are 9.6 N3DS titles decrypted then?
  9. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    Look here: http://3dbrew.org/wiki/3DS_System_Flaws#arm9loader With this trick you can run a9 code with N3DS 9.6 AES keys not cleared! This mean you can decrypt any 9.6 N3DS title... But you can only do it if you have NAND mod. I hope I make sense
  10. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    Is good question, many people like me would like to know too :)
  11. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    1. My friend, 3dbrew says: If bootrom was dumped, they would know exactly when ARM9 memory get initialized -> this means bootrom is not dumped? 2. I not talking about disable NAND, I talking 2 physical NAND which can be switched by HW mod. Maybe there are other ways to do it, but this is my...
  12. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    I think these N3DS-only 9.6 titles were decrypted by using HW NAND swap on softreboot (because no key clear). This is different flaw from bootrom fault glitch.
  13. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    I think exploit is only theory, nobody actually done it yet
  14. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    you found JTAG for a9?
  15. proruskii

    Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

    How to inject a fault into hw for a9?